Method, Device and Service Provision Unit for Authenticating a Customer for a Service to be Provided by the Service Provision Unit

Abstract

Method, device and service provision means for authenticating a customer for a service to be provided by a service provision means. The invention relates to a method for authenticating a customer for a service to be provided by a service provision means. The method comprises the steps of: authentication of a customer as member of a defined customer group on the service provision means by means of a first group signature assigned to the defined customer to prove authorization of the customer to avail himself of a service; request for the service from the service provision means by the authenticated customer; and authentication of the customer as a member of the defined customer group by means of a second group signature assigned to the defined customer group to demonstrate the customer's consent to a billing process for billing the requested service at the billing centre. The method allows for a secure use of the service while assuring the customer's anonymity. The invention further relates to a device for performing the method and a service provision means.

1 . A method for authenticating a customer for a service to be provided by a service provision device, the method comprising:
 authenticating, by a processor, a customer as member of a specific customer group on the service provision device using a first group signature assigned to the specific customer group to verify authorization of the customer to utilize the service;   requesting the service at the service provision device on the part of the authenticated customer; and   authenticating the customer as member of the specific customer group using a second group signature assigned to the specific customer group to verify consent of the customer to a billing process for billing the requested service at a billing center.   
     
     
         2 . The method of  claim 1 , further comprising:
 providing the requested service on the part of the service provision device.   
     
     
         3 . The method of  claim 2 , further comprising:
 billing the provided service on the part of the billing center.   
     
     
         4 . The method of  claim 1 , further comprising:
 providing cryptographic keys for generating the first group signature and the second group signature for authenticating the customer as member of the specific customer group.   
     
     
         5 . The method of  claim 4 , wherein the cryptographic keys are provided in an electric vehicle, a mobile terminal, an access smart card, the service provision device, or a backend of a service provider that provides the service. 
     
     
         6 . The method of  claim 1 , further comprising:
 providing cryptographic keys for generating a service provision device signature for authenticating the service provision device with respect to the customer; and   authenticating the service provision device with respect to the customer using the provided service provision device signature to verify the authorization of the service provision device to provide the service.   
     
     
         7 . The method of  claim 1 , further comprising:
 providing cryptographic keys for generating a third group signature for authenticating the service provision device as member of a specific service provision device group at a service provider; and   authenticating the service provision device as member of the specific service provision device group with respect to the customer using the third group signature to verify the authorization of the service provision device to provide the service.   
     
     
         8 . The method of  claim 1 , wherein the service provision device comprises a charging post for electric vehicles, and
 wherein the service is electrically charging the electric vehicle or an added value service.   
     
     
         9 . The method of  claim 1 , wherein the service provision device is configured as a rental vehicle, and
 wherein the service is renting out the rental vehicle.   
     
     
         10 . The method of  claim 1 , wherein a communication between the customer and the service provision device with regard to authenticating, requesting, or authenticating and requesting the service takes place via a cable connection, a wireless local area network connection, a Bluetooth connection, a near field communication connection; or a mobile radio connection. 
     
     
         11 . The method of  claim 10 , wherein the communication between the customer, the service provision device, the billing center, or a combination thereof is encrypted by a security protocol of Secure Sockets Layer, Transport Layer Security, and Internet Protocol Security. 
     
     
         12 . The method of  claim 1 , wherein the billing of the requested service at the billing center is implemented with a prepaid method, a method for payment by a mobile terminal, or a debit method. 
     
     
         13 . The method of  claim 1 , wherein the specific customer group is assigned to a specific performance range, a specific tariff option, or the specific performance range and the specific tariff option at a service provider that provides the service. 
     
     
         14 . A device for authenticating a customer for a service to be provided by a service provision device, the device comprising:
 a processor configured to:
 authenticate a customer as member of a specific customer group on the service provision device using a first group signature assigned to the specific customer group to verify authorization of the customer to utilize a service; 
 request the service at the service provision device on the part of the authenticated customer; and 
 authenticate the customer as member of the specific customer group using a second group signature assigned to the specific customer group to verify consent of the customer to a billing process for billing the requested service at the billing center. 
   
     
     
         15 . A service provision device comprising:
 a device for authenticating a customer for a service to be provided by a service provision device, the device comprising:
 a processor configured to:
 authenticate a customer as member of a specific customer group on the service provision device using a first group signature assigned to the specific customer group to verify authorization of the customer to utilize a service; 
 
 request the service at the service provision device on the part of the authenticated customer; and 
 authenticate the customer as member of the specific customer group using a second group signature assigned to the specific customer group to verify consent of the customer to a billing process for billing the requested service at the billing center.